Pwno Mcp

Name: Pwno Mcp
Author: pwno-io

by pwno-io

MCP for Pwn

274 GitHub

No known CVEs

No license

Maintained

Last commit 114d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Security Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "pwno-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/pwno-mcp)](https://mcppedia.org/s/pwno-mcp)

Read me

What Pwno Mcp does

pwno-mcp runs GDB + pwndbg in an isolated environment and exposes stateful debugging, exploit I/O, and helper tooling over MCP for agentic coding clients.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

25/100across 5 weighted dimensions

How we score →

0255075100

−75

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Pwno Mcp safe to use?: Pwno Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Pwno Mcp?: Pwno Mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Pwno Mcp?: Pwno Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Pwno Mcp actively maintained?: Pwno Mcp is less actively maintained — last commit was 114 days ago. It has 274 GitHub stars.

Similar servers

Others in security / developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

Jscpd97

Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.

5.8k 1

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

MCP Security Weekly

Get CVE alerts and security updates for Pwno Mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Features

Stateful debugger sessions via GDB + pwndbg

Deterministic execution control via GDB/MI

Fast context snapshots for registers, stack, disassembly, source, and backtrace

Interactive exploit-driver workflows with pwncli

Multi-session support for parallel workflows

Workspace automation helpers for commands, processes, Python, repos, and RetDec

HTTP and stdio transport support

Quick Start

Create a local workspace directory, put your target binary there, then run the container.

mkdir -p ./workspace cp ./path/to/your/binary ./workspace/chal chmod +x ./workspace/chal

docker run --rm -p 5500:5500 \ --cap-add=SYS_PTRACE \ --cap-add=SYS_ADMIN \ --security-opt seccomp=unconfined \ --security-opt apparmor=unconfined \ -v "$PWD/workspace:/workspace" \ ghcr.io/pwno-io/pwno-mcp:latest

Default MCP endpoint:

http://127.0.0.1:5500/mcp

For stdio mode, client configs, health checks, and attach-helper details, use the docs site: docs.pwno.io/quickstart.

Frequently Asked Questions

Is Pwno Mcp safe to use?

Pwno Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Pwno Mcp?

Pwno Mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with Pwno Mcp?

Pwno Mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Pwno Mcp actively maintained?

Pwno Mcp is less actively maintained — last commit was 114 days ago. It has 274 GitHub stars.

stateful system for autonomous pwn and binary research, designed for LLM agents.

Overview

pwno-mcp runs GDB + pwndbg in an isolated environment and exposes stateful debugging, exploit I/O, and helper tooling over MCP for agentic coding clients.

Features

Stateful debugger sessions via GDB + pwndbg
Deterministic execution control via GDB/MI
Fast context snapshots for registers, stack, disassembly, source, and backtrace
Interactive exploit-driver workflows with pwncli
Multi-session support for parallel workflows
Workspace automation helpers for commands, processes, Python, repos, and RetDec
HTTP and stdio transport support

Documentation

The full documentation is available at docs.pwno.io.

Quick Start

Create a local workspace directory, put your target binary there, then run the container.

mkdir -p ./workspace
cp ./path/to/your/binary ./workspace/chal
chmod +x ./workspace/chal

docker run --rm -p 5500:5500 \
  --cap-add=SYS_PTRACE \
  --cap-add=SYS_ADMIN \
  --security-opt seccomp=unconfined \
  --security-opt apparmor=unconfined \
  -v "$PWD/workspace:/workspace" \
  ghcr.io/pwno-io/pwno-mcp:latest

Default MCP endpoint:

http://127.0.0.1:5500/mcp

For stdio mode, client configs, health checks, and attach-helper details, use the docs site: docs.pwno.io/quickstart.

Development

For local development, architecture, and contributing guidance, see docs.pwno.io/development.

Usage

non-profit: yes
commercial: oss@pwno.io

Future Enhancements

WebSocket endpoint for streaming I/O
Advanced memory analysis tools
Heap exploitation helpers
ROP chain generation
Symbolic execution integration

License

This project is licensed under CC BY-NC-ND 4.0.

See LICENSE for details.

Contributing

Issues and pull requests are welcome.